CVE-2025-43916

Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which is not consistent with RFC 6819 section 5.2.3.5. An authorization code may be sent to an attacker-controlled destination. This might have further implications in conjunction with "Decompiling the app revealed a hardcoded secret."

• CWE-647

• https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2025-43916/detail.md

Published

Apr 21, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43910Dell PowerProtect Data Domain with Data Domain Operating Sys…4.4
• CVE-2025-43911Dell PowerProtect Data Domain with Data Domain Operating Sys…6.7
• CVE-2025-43912Dell PowerProtect Data Domain with Data Domain Operating Sys…7.5
• CVE-2025-43913Dell PowerProtect Data Domain with Data Domain Operating Sys…6.5
• CVE-2025-43914Dell PowerProtect Data Domain BoostFS for Linux Ubuntu syste…7.8
• CVE-2025-43915In Linkerd edge releases before edge-25.2.1, and Buoyant Ent…6.5
• CVE-2025-43917In Pritunl Client before 1.3.4220.57, an administrator with …8.2
• CVE-2025-43918SSL.com before 2025-04-19, when domain validation method 3.2…6.4
• CVE-2025-43919GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows u…7.5
• CVE-2025-4392The Shared Files – Frontend File Upload Form & Secure File S…7.2
• CVE-2025-43920GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certa…8.1
• CVE-2025-43921GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows u…5.3